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(57)Abstract: 

PROBLEM TO BE SOLVED: To prevent the forgery or 
alteration of data, and to allow only the first transmitter 
and the last receiver to easily read the contents of the 
data in transmitting and receiving data through a 
different third person when a user B inputs and 
transmits a card number assigned from a card company 
A through the home page of a member store C. 
SOLUTION: Data enciphered with a first key can be 
converted with a second key, and deciphered with a 
third key. Those three keys are distributed to a three 
persons. A first information processor 101 enciphers a 
card number or the like with the first key by a card 
information enciphering part 301 e, and a second 
information processor 102 which receives it converts it 
with the second key by a card information converting 
part 302d, and a third information processor 103 which 
receives it deciphers it with the third key by a card 
information deciphering part 303f. 
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suEtff 2 ©it mmmmm*. 
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WKftfll^aiC J; t) §Hf § tvfcy 1 -* £f? 3 ©ft^ i. V 

^&-rsfg 2 

[»*«3] MEMi©#t(-J:^&£ix/tx-* 
tt, fiEfS 2 ©gtlc i 15 £ & $ ft 3 tBuEB 3 ©Hie 
J: D iMEJS l J; 5 XJM&WtcOx- 

9 bteZ>^b*®®Lb1rZ> fflEff 1 4 2 
tcE^x-^&gftv'^xA,, 

hJE* i ©ttwigg-e, T-?^i©iia« 

iiuESg l ©fg&XgT-£&$*ifcx-*£, fiuEB l © 

tf a&a8«d» e» fiuE» 2 wit m.fmmm\z.-m -tzm 
i<DmtiT.nb, 

wimm 2 ©it mtmmw.x% mmm 1 ©ant is-e&ft 

3 jvc § fcx- 9 zm 2 ©h m £ D £&-r 5 If 2 ©'£& 
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2©iiffXgi, 

BuEH 3 ©fif ftftUlSlt-C, mJE^ 2 ©^mxgT'^ft 
Xgi, 

fc^/y«r £ b i"5 x-* ^gfl^fe 
[M*«5] *i*JJ:u«*2©fl»««yiSlllWCx- 
^ SriHSfS 1"5 x- ^ iiSff *3V ^t, 

a^ET* 3 ^ tjg 2 ©aic i t) mmtzm 1 his 

mum 1 ©asiftxg-eiE* 3 ftfcx - 9 £ , stfEis 1 © 
it $g^asa/4^tuEm 2 ©« aauiasaiii&fiM- as 
fixst, 

miEiMmxgT'iim^ft-Ct^x-^^, tuE^2©tf 

m&mmwxm 3 ©^tr ± 9 m&-tz% 2 ©^^xa 
z-s/utzz b &¥fmbi-z>y t -9m%mijm. 

[»*«6] b^EM 1 ©H(- ± t) 3 ixfcf- ^ 
(i, 2 ©Hie i 19 ^ 3 fi § C HtuEH 3 ©Hi;: 

<t 0 ^i^stts i mmm 1 ©at- =t 5 ^sihu©tc©x- 

^ 1 4 5 r fc t -f-5 huE«#3S 4 * fcttW*3S 5 
|:E® ©x- 9 

[IS*«7] MEfl*Ji4~II*«6©v^T^^-o 
tE« S ft/c^ft S: = y t°3. - ^ [i^fr $ * 5 7° n 9 y 

[0 0 0 1] 

[«K©JR-f 58#T#if] roSS^tt, ic»©S*5H 
#W *gALtf-^ ©jggfs Sr*s r 4 5 x - ^ 

[0 0 0 2] 

[&*©fi«] SS, ^f#tSjf#i©^©iiff^ 
±{C*5^ tiotztXD^immb LXlt, -JK«J^2o 

©*a, -t-*^*, (i) *a^a«*5Ci: (2) 
[0003] ( i ) &m®%mjj-&ti. jiff # a • 

L, r©*^fi±Eii©St#^ (B©i 5 KjEMSKA 
#Lfc#©liA\ ^jE4#©T-A¥L/c#^tf) ^x 
(Sfeg) , fc5v>(ifi|it (gig) ©X, XE 

IBH#/«cif{c2lf5i-5v^^-5 r^ij-fsuj ?rKX-r 

[0 0 0 4] fc^F (2) ^lft^©f-t*W4t©i-R 

SAiSfcSis, rftHS*^*5 2o©ftSrffliSU 
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£Lj <D|fflSH:3&£LftV\, 
[0 0 0 5] 

Htt£-c?3&£i-a«*<oJDi3N M«ft^±«k 

ot« #»©gft-5-#«fl-(c, £fci~3i«<7)gft5m 

[0 0 0 6] fcix.ll ftfHWWi* U-5?y h#— KM 

-f >"*-*s/ hftifw^s' F!7-^rti:M^ Itbz. 
tf±IE (2) ©4iM«^S;^i!3S^*5r/«c*J5 fci" 

*0>3MHtt|gi 1 5 ft<>©£ ft3„ 

[0 0 0 7] (a) «©Slt*L 20 

PJStKa' L (1) , KD^lfKa' £#JP 

M^3l#t-C*5< (2) „ ^PMlSii^^n 

gjSffl©-*f©i5?gsiKc k&mmKc' t*±j&Lx 

33< (3) . 
[0 0 0 8] (b) *-Kfl?»©SftatL 

(4) „ -t LT\ I©5V^«Kb' <7)*Sr, SB© 

#1-5 (5) o ftfc, r^sanKb t&fflmKb' t 

tts ±EOJ:5tB*4j*LTKb' £A[C«-f6D-eft 
[0 0 0 9] #- K£t£Ati±lE<D$Lii^£ 

icttB©*- K#^B^fcS:ttSiofc^HliKb' , 

A»$fiK a -CUt (6) 
0>±, BJCiH#i-5 (7) . 
[0010] ( c ) $6&<D%&/&& 

% LT, *-KfiJffl#BiiJqfflJSCisWK1-5*-A^ 40 
-v^ftf-e, #a<75^p°p 

leu, jSj B R p£-*Hiit &stft^»a£ftw&, bws}«5 

HKbiCi (JBfHHbL (8) , Sfclcrftl-Afl^gtt 
®ofc#- KttfBSriIJp-f-5 (9) lit, FJ?^<75 7^- 
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<9^HKbT-Bf^-ft:$ti^a^:rtW^«^-r'#€) (l 
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i-*i3*,±EaXi s S}««KbS:ft«fi-5B*AI- 
i 5 <b r t SrSBBf 5 r t as T- # 5 . 
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^ttAic^LT, *- KflJffl#B©lBAft&©£ft^«r 
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[0014] !S*Sffi-Ctta»[©«l'i5 

#«*t s. *fcs #-kw£b«#-k£ 

|±A^i£tt£*Wc;&-Ktf$ft (7) £, Kc' K-fcS 
Bf^-fH©^ (11) -eJpfflJ3lC^ai#i-5 (12) fc 
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Pfl T*X - * fc&gft-i- 5 X - ^ i£g{f t*5V s M 
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■f-5*l©3E*XSi:, Wf5^l»^xm-e^ife$ii. 

a«yns«t?. a&EfS 1 w^it xs-e^ft s # fcx 

-^Sr»2©«^J:9IE*-f-5»2©3EiftXgi:, WIS 
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mJMxmmztixz tz? t -9 3 <m^ *. <o mkt 

[0 0 2 8] r©»*«4HE«©»Wl- ct^tf. Wk 
&<D?—9(DWift%teZ<DUfn<D%.&7c\z- i. 53E*B&© 
x— *£&i£U fe5v^ttaE*ft©x*-^*»fe*7cLfc 

[0 0 2 9] »*^5^E«©ISW^A»*»5x*- 

^ mgrnxmi. % 1 *s £ vm, 2 wistnt-f 
-^^sm-rsx-^issm^fti^^x, n iron 

j ?>i:i2rojiiij; •) ^»t5^ 1 ©f *igi . mm 

m l ©g»xg-?3E*£*ifc7*-* fuE^ 1 «tf * 

g£, HuEilff XgT'^fS ZtiX%tz7 t -9$:, 

2 ©tt^iaagax'^ 3 ©H(C ± •) 2 <DW& 

TMk. Z-S/vtz^kZW&ki-Z, 
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[0030] ^K>a*3S5^IE*ro*M^J:ixrf, 

[0031] 4tc, ai^BtEitojswKa^ST*- 

X v) mkZftZtmiW, i ©ici5fliro%rof- io 

[0032] z.<Dn&T%6\znm<nmmiziti\i, mm 

[0 0 3 3] Sfc, St*«7^|Efc<03SS^*^57'o 

«StL^*ftSr = ^tra-^{cJ:o-clllfe$*5rtis 20 

[0 0 3 4] 

%m tc «t 5 x - * sgffi ^ta, t-* &g«#ifc*s 

J: tf-t * = v t° * - * Hfi 1 $ * 5 7° p V y A £ 

[0035] mmmmi) *1\ rwiiwit© 
i^-oaum-So lam, nig^sif-<t5x-^iis 30 

lOllW-K^iAOflfSayfa-^, 102 
K^Jffl^BW^-f-^^t":*-*, 1 0 3I2JP 

fflacw^ai-sa^fa-^-efeij, ioo{±±i2w 
[0 0 3 6] o^ic, :ff)»fflilrollii;j:5f 

IKCi^ay^-^ 10 1-10 3cD/n-K^T 40 
ffiS-h, S-ai't'a.— *fiP-0V>- K^Tflff&S-W 

[oo37] reu^^t, 2 o i izmw±&zmm-r 

5CPU^ 2 0 2J±S*AW^J7 , o^9ASrHaiBLfc 
ROM^ 2 0 3liCPU201©y-^x!i7iLt 

[0 0 3 8] Jf;, 2 0 4IJCPU2 0 l<D$ffl\CL1t 
jiotHD (A-Kf-f^?) 2 0 5 [C^-TSx-^CO 
!>— K/7>f F^JitSHDD (/n-KxV^^K^ 50 
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£, 2 0 5HHDD2 0 4W|J|ltLfc^ott 

5 0 2 0 6i4CPU2 0 1O|Jil;Lfc^ o tF 

D (7oyf- (SSftflQ tV**) 2 0 7C»t5 
hSrfliW-fSFDD (7Pyf- 
r>f^^K7-1'7l £, 2 0 7iiFDD2 0 6fflMflt 
L fc # o -c » # a 4 ti tz 7 - * £ I m It 5 *J& § ft © F 

[0 0 3 9] 2 0 8(4*-y;U, , <?4 

>K?, fc£Wi;£^PH£ftJftf>#8x— ^5r*^-f 

Sf^T'W^ 2 0 9fiaftlHliSl2 1 OZfrLXJ 
t£0*y yy — i> I /F WV?-7i-^) Sr, 

«i*ltv*s. 21 1 us:*, #«tt^ 
2 1 2 te#ft*§^<£>8#^llfi\ «ysiat*©ii#, 

V/MD&mt£ if *43i4 5 ? * Sr, ^tt^tUF LTV n 

[0 0 4 0] *7i, 213 flX^BiflltJt^W^SK* 
ftS*^"?-*, 2 1 4 ttX^Bi^S-ffl^ii- WJ-t" 
37°y 21 5ttfRWiESifl:-C*5CD 

-ROM£, 2 1 6 SCD-ROM2 1 5 Kft-fZy*— 
9<DV — KSr*HH"5 CD-ROM Ky^fr, 20 0 

ii±ia#si5 s ^ * ©/< * ^ « x - , * 

[0 04 1] o#*t, ~<D%m£>mM<DB1&l Ci5f 

3 nmrnm 1 lusf-^^ss^fio*)* 

[0 0 4 2] |^0^-r±9{-, 7J-K^±A»3yt° 
3.-^ 1 0 lf±&£j£&3 0 1 a N HE1ig|5 3 0 1b, 
a^ff 3 0 1c, 7J- Kit *Sa«a 3 0 1 d , 13— K 
ttftlt^kSB 3 0 1 e *3 it5*~ Kit $Bi£ft SB 3 0 1 f 

[0 0 4 3] *rc, *- K*Uffl#B©3VtT3.-^ 1 0 
2 (iTJ- KfiiagftSS 3 0 2 a, Kti!*IElt» 3 0 
2 b , ftgftffi 3 0 2 c, KflMUEilA 3 0 2 d , 
£:Jt»fftSW 3 0 2 e 43 ±W&Jt#SMI % 3 0 2 f^ 

[0 0 4 4] 4fc, }jn§SJ£Cc75=i yfa-^ 1 0 3(i«l 
SifSP 3 0 3 a, fltfSlggP 3 0 3 b, Itilff 303 

c , &xm§:im 303d, Kit ®.mm%> 3 0 3 e 

teitJ 5 *- Ktt$6«^-fC3 0 3 f Zttsm&XhZ* 

[0 0 4 5] ±E#gPH : §-3^t 0 3 .-^roHD 2 

0 5-^FD2 0 7, fc5^|iCD-ROM2 1 5?£}f<D 

#ffiean#i>feRAM2o sicK^ms^^n^y 

A©^|lLfci5ot, CPU 2 0 1 /iifiS^iltffl* 
5tW-efoS 0 47C, KflJH#BW3^t°3.- 
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1 6 -ritai-r?>fSo B pro^a/sa 

[0 0 4 7] ^fyT'S 4 0K\ £1**- K#ltA© 
3^h°^-^ 1 0 114, -£©it±$$15 3 0 1 adiDEJl 
TTttK-tSY* • Am ■ U«<7? 3 0(D«^4^1-5 0 

mw&xft\mt£ U«iT«-§-f 5 ' t fi-e#T , Ait* 
«F*fl2 * Jtfc <> ©teu&in J: 3£ifcm-eft titi Ymx- 

«-§"t5r if4T-#T, SfciT©*, fc5W4£f<752o 
roilOia^-a-fc-arfc 4 o -C t {iil<7)|ISrit#€1-5 r t t4g 
HT- £> £ j £ ^ 5> §kW Zffifc £ ft tttt tf ft * v \ 
[0 0 4 8] i©i5ft3o©lif±ir©J;5^LT*«> 

5, RSA#A£:j3l4*^#W#j££:fc«-£fflLT 
[0 0 4 9] RSA-Cffiffl$tb58Hlf«t^lB«©2o 

<om\t. rmnxo\cLxmm^ti^ 0 2001 

SPfcitfOfcatf, TN=P*QJ t rL=*/J^ffif 
|Sc (P-l, Q-l) J <7?2o(75ffi5:**5c, tLT, 
fD*M=n*L+lJ ftf&lL-rZDbM$;$iib (tztz* 
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[0050] zhbzfc^x, rmon&tt 

{tkQLtttSZttlo ft*=\ TData " DJ (4Da 
ta©Di?r > Ife Fmod NJ (4 NT'tJo tz.& 5 £ 

flt-f-ffc :Coded= (Data "D) mod N 

:Data = (Coded "M) mod N 

[0051] rfu-tf L-c**m-ett 3 oron^&gft 

10 <DT\ rD*M=n *L+ 1J ^^-fSDtMSr** 
3ftt?>9t;:, ry*A*u=n*L+ U it&tLlT Z 

Y, A*54l/U£#&5 0 fcfcLY, A, UI4**L-Pix 
n * L+ 1 -efcoTf4ftibftV\ r»4 5ftY, A*S4 
T*U<E>»J4, TD (i) *M (i) = n*L+lJ %y|t 

[0 0 5 2] 

Y =D (0) 

A (i) =D (i) 
20 U (i) = (M (0) *M (i) -1) mo d L+l 
[0 0 5 3] LT, rixP)3o©«Srfc*)^T, Hf^S" 
ittiK^-t £TfBft Jf 4 9 *3 i ft 5 . 



Coded = (Da 
Coded2= (Co 
Data = (Co 



[0 0 5 4] ftfc, S6t?ai£i-5J:5^ (l) At-4 
5P£^W4;&- K^ttAKfcttS&S, (2) 5£te:43 
3E£f4#-K#Jffl#Bte*5ttS8yS, (3) 5tHl± 

5 «-^(4JPM^ C [d js 14 5 «LS i: ft 5 . 

[0 0 5 5] ftfc\ Pt-^fbt>a^fciK*TJ43Em^4 

Wx-^¥£T-fc3 4 5ft£&£«-^ 

[0 0 5 6] 0 4 MM "9, ■ogiCXy L y7S 4 0 2T** 
-K^iA©ayta-^ 1 0 1(4, ±fST*4)tL/c3 
o©«Sr*©«E1taJ3 0 1 *x 
y^S 4 0 3T-±IEW5^AHiU|ti:S:, 

$113 0 1 c*>e>jpiaac©3Vf 1 o 3, 
irf4-e»iigftss3 0 3 a^aifln-s. *lt\ 

7°S 4 0 4T*JPS0C©=!>'t o 3.-^ 1 0 3(4, 
/c2 0»it^ ; e»af2tt§|13 0 3 b^*Mfi1"5. 

[0057] ft*5, «**Uii-5tHl5S;^P>fc^i»5J: 
-o<Z>Y»£#J&1-3A«fcU«^©i|y^i**# 

i-SJPffiJSC&T^JOHJif K#f±A#{fcf# 
t5-o©y»:Stf)Et5, WetLgft3A&£USi 



30 



a " Y) mo d N •••(!) 
e d " A) mo d N • • ■ (2) 
ed2 'U) mod N •••(3) 

[0 0 5 8] oft, 0 5}4H6T^5*-f3(£ip n H <753ga 

4 3&3I4, K#l± AiS^5i#B*»5> <7)^ — KfiJfli 

[0 0 5 9] Xt-7 7°S 5 0 1-C, *i* *- K^?±A© 
ayta-^ 1 0 114, Ktff«!Elfta3 0 1 d 

B) ©jt/-Ktt«, **WJ'f4^ro*- K#-^, ft^S, 

[0 0 6 0] "/7'S 5 0 2T, K^±A©3^ 
40 f a — ^ 1 0 1 f4-t©*- KrtrfllUff-^YfcSP 3 0 1 e l^jo 

^x-y 3puffl#B©*-Kttf«*, «gaita5 3 o i bi>e>is»)W 

gffiL LfcY»iJ:*)liif-§-{bi-5. -Tftb*,, ±i£© (DA 
HUiSot, TDataj (r r f(4¥5:»*— Kit 
ft) A»b Tc o d e dj (YmX*1feflr<mv>$- Kfflf 
ft) Sr^*i-5. 
[00 6 1] oft, ^T-77 , S 5 0 3fA-K^ttA 
ffl^yfa-^lOlll YH(c4 5^mw^- Fit 
ftSr, Ktfftiiffl^ 3 0 1 f frhl3~-Y%m% 

50 * ft WC: (4 Ktf ftS 
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mSP3 0 2 atCiHmi-5„ ^LT, ^T^S 5 0 4f 
* - K?lJffl# B <D => y t" 3. - * 1 0 2 !i, ±!E-?g{f L 
KflMRfc*©*- K11MME1H* 3 0 2 b tftlfti- 

So 

[0 0 6 2] off', |3 6fir<03£K<DHJ£<^Jil tc 

isf-^ iisft *sx 7- a t *5it 5 , is a co^a/sa 

tt5o ftfc\ :®7D-ft- H-iS^am #— H 

^Jffl^B^iBMffiCW^-A^-i/^t'fj^fp^aL 10 

fc t # , t urn £© ax y * - a ft z \c -m^m 

[0063] ^f"y7*S 6 0 IT*— KflJffl#BW3> 
fc°3.-^ 10 211, ^<£>®§:ff§l$3 0 2 d:J;!), JPM 
JgCCDnytf^-? 1 0 3('>tfL-C^(73Att£KHf1-3 

IttommiB A 3 0 3 c Tf±|E5*SrSf3 "f 3 t , «IS 
SS53 0 3 b t'&ffi £ftfcAH£&>9ttiLT, S*^c<73 
«gff|ftf3 0 2 c[Cj£ff1-3o 20 
[0 0 6 4] o#*{C N X7-y7°S 6 0 2t*~ KflJffi^ 
B©3yf^i0 2li, -to*— KW#83EiftfflJ3 o 

2 d WSV^T, KW*3E1KBP 3 0 2 bfl»P>8i!JtiJL 

ftfr^, (2) ifcKLfctfSoT, TCodedJ 

(YifBtffkS©*- KfltfR) i»6 rCoded2j 

[0 0 6 5] i L"C\ ^y-y-fS 6 0 31?*- K#Jffl# 
B©^Vfi-? 10 2li, *C»ai#^gB3 0 2 e 30 

KT?$»«<o*- Ktif* 4 ~ t T, FjrSw?* 

4-er©ax#^ax»^ffigi53 o 2 f ^^^t u r 

ixisjpgaj£c© = yf a-^ 1 0 3 »ai:»S:fflSl3 3 0 

3 diCiDSif 

[0 0 6 6] o£*tC, ^f-77S 6 0 5-C«JSC(7)3 

yfi-^ 10 311 ±E-eSfS Lf-ax»rtw*- K 

it***©** (i-ft^*), YiijcitJiit^^nAii 

ti9**Snfc«t«o**) *-K1f«E1SSlS3 0 3 40 
e dftiifrtS,, ^7y^S 6 0 6WA-KIS 

3 0 3 f KJol^T, gffLfcaX*rt»*- K 

ffi#&u*fcJ:»>aMi-t-3 0 1"ftfr*>, ±3£© (3) ^ 
tcLfc^ox, rcoded2j (Y«-enff-^k«SP> 

fcA«-e«»*Hfc*-Kfltfl) *>?>7C<7) TDa t aj 

[0 0 6 7] o#'(c07i±, z<D%m<Dmi&(D]fmnz- 

£5x-*i£gfr>;*xAt£:i3tt£, £=iyfcr3.-*ra 

[0 0 6 8] (a) L 50 
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*1\ *HUl-#- K#ttAfc*5tr*TYll • AH • U|t£- 

(i) , A»tu«©asfc©ilia*-a'b-tir©^^p, 

-o£S^T% #JPKJS^^L-C*3< (2) „ 
[0 0 6 9] (b) *-Kffi««SH-«U 

#73- KfiJffl#©#- KflMS«ri©Yir«ff*ft 

©± (3) , #Af'ii#Lr*5< (4) „ 
[0 0 7 0] (c) M&x(OW&./^.&. 

Sp n p©ttWl:tt, 7J- K*M#Bf±JPS&j£C(B*--A 

^-^ft^ib^WA^Sr^^n-KLT (5) , Y 

(6) , rft&TOo&ifcrt^iiig (7) brax* 
£fft£U iqffi0cnai«-i-5 (8) „ ft:fc\ rftfcro 

mNfl-Sllii$l~ISfT£*u ^©roftfm&Sftv^ -t L 
T, JpffldC-eJl*- K3pJffl#Bjl»P>S:tt8iofcaX» 

[0 0 7 1] ( d ) ft&©!t* • 
5 (10) „ 

[0 0 7 2] K^ttA-Cf±=PJffl««K»WiW**#?IJ 

0ropffi^(D{t^ l 9ii^4r*Jrft5 (11) » 

[oo7 3]@n^ ufetaejfefiEflf^Jtis lt, h 7 

ffl#Bi»C>JDaiJ3lc^*5 (8) *-K««fi, *-K 
£*fcAa»fci£tt£;h,T#fc#-Kttr# (4) *SfelCA 

H-e^SHfc (6) t<75T-fei9, ip§aj£cT'«r^^ 
uH-em^-LT^xi'M-r O) rtn-et-rt, Am 

[0 0 7 4] Lfc^oT, JPfflJSC^i5aX#<Z)ft)g 

[0075] fifewjnaa^c' s^Ko^ai 

^m*- Kfi?*tt*- K^thA^P>i^#Six^«©* 

fiJ#icio-CSBroA' SlT'^§tifcfc(Dt^55^> 
]E 1 W Jqffi J£ c *s * - KfiJ ffl # B ft u -f 4 -f ft if 
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[0 0 7 6] £l±Rfl LfcJ: 0 KMWmm 1 Ci5f 

[0 0 7 7] ft3b\ iSE-ettjgSSLSrffittSfcfcRWSr^ 
lfcLfc#, «aifilW3 0 1 ci»fc«SffiW3 0 3 a-<D 
&tf>£{f (H70 (2) ) , *-KflM3S«»3 0 l f 

(pi (4) ) , *3 «t t/a3t»aiflrsB 3 o 2 f *»€>sdt» 
s« 33 3 o 3 d ^oax»©ans (pi (8) ) B»eia\ 
y* • ai • umt \tm<nmttm ro&ic ± o xmmft® 

x. tfSffi* if £ 1 o -calf* fcfc r ft 5 «t 5 K LT t 1 
[0 0 7 8] (SUto»lB2) S"C, JbJ*LfcHJ6©Jg 

5^r-*ftif, HK«i^H#iS|H4-U-C^5i:*5^i: 

V > T fc , &»Sffi ro^it^^ iti 5 L tl* L «Pp1S t ft 5 © 
T\ eiTT?KW-f5HJfc«)^IIB2©J:5^, 3 orotic 
1 5«f-g-flS-^«#*#a©SE«S^j£ffli-S ©T'fco T 

[0 0 7 9] 0811, H«i<0^ 2^^5^-^215(5 

o utmw%A<D&:m-f z 8 0 2itmm 30 

K#B©ftfiFi-5=«^tfa-^, 8 0 3(«|iEBJ#B t 

8 0 OliiEW'frs^f =--^SrffiZ^gH»i-5^y h 
>7-;5\ ftftttfcJi^*-*-./ h^LTV^o ft 
33, ^aytTa-^C^-Kj'iTiSH;, 02lC^L 

tcnn<Dmm 1 t pjirefc 5 1 © 1 1-5. 

[0 0 8 0] o?fc % 0 9iinffi»^|g2^i57 ? -^ 

01^1" i 51-, IiEB^^-A<75=>^t 0 a.-^ 8 0 1HHIE 

9 0 1 a , m&w 901b, m&m n 901c, 40 
SE&HPSSEttss 9 0 1 d , mmmftf$& 9 0 1 e , urn 

m^lt&9 0 1 f ^J;^|iE0^»^{fgB9 0 1 g&tts 

[0 0 8 1] ffilIS^#B(7)=!^t°^-^ 8 0 2li 

mm^\t U 9 0 2 a, ftgff gfl 9 0 2 b, 5E§fJ#^& 
A 9 0 2 c 33 ±tmW*iH^ 9 0 2 d £^tf*j&T*fc 
5. Sfc, *3l3feC©=>K'a-^8 0 3f±ttSflllaJ9 
0 3a, HffitlSfl 9 0 3 b, mWmU 9 0 3 c, SEH* 

gftsp 903 d&tifuwmm^n 9 0 3 e sr-g-tp*^ 

•CfeSo 50 
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[0 0 8 2] ft33, ±fS#a5tt=§-3>-t 0 ^-^£DHD 2 
0 5-^FD2 0 7, fc3VflCD-ROM2 1 5 ft if (D 

AB^L^oT, CPU 2 0 ltt£tf4HM&S* 

[0 0 8 3]o#*[C, Ell 0(l^J£roff^2^<t5x- 

WISr^i-7n— ^^— ht**>5„ £!Tr©7a-ft- 

[0 0 8 4] Xfy7'S100K' 1 *T&3l3feC©=i 
8 0 3 9 0 3 ai>f), SE93# 

A©3>fc°^-^ 8 0 1 icMLTA&irU&irSr&ff-t- 
5i5S*-r5o r©^^<DH2lfflgB9 0 1 c\zX 
«3SfSLfciEW#A©=i>'tra-^8 0 ltt, ^ry7" 
S 1 0 0 2T" J E-(DiKiiiRgB9 0 1 b^iD, hbfrX,$> 
S tL-C«E«fiP 9 0 1 a KtMASixTV^AHtu 
mt(Dy$<Doh, £fclfi,<D<|gAftif(~ffiffl£3xT^ftl^ 
Vvf*u&»©-*t£iS«1-5o *LT, ^T'^S 10 0 

3X'z<omvi£titzAmtijmkz y m&{s&9 o 1 c 

a»&£#5E©*gff8B9 0 3 a HaSflri" 5„ 
[0 0 8 5] ©SlftCroaVfa.— * 8 0 3J1, §{1L 

^A^tu»i:^, ^f^s i oo4-e^ro«iieitgB 

9 0 3 bl:*Mfit2i:i:t)t, 7f5'7'Sl 0 0 5t^ 

<Dgti£ff3$9 0 3 cd»P>, Sf|EK#B<©3Vt"3. — ^ 8 

0 2 ©fcgfl SB 9 0 2 b tiifti-5o 

[0 0 8 6] Sfc, ^ry/S 1 0 0 6T?SSE9!#B© 
3^^-^8 0 211, *©»EW#Sf3ffi9 0 2 ai»t> 
EEW#A© = ^bra-i5'8 0 lf^LT, HW*©^ 
S*«r^fgi-5. 3L©3Sfrg#**©SEK#&flWl$9 0 

1 g-Cgfi LfclEB^^ACOayt''^-^ 8 0 1 tt, ^T 1 
y^S 1 0 0 7-e-t©EW*^SiS9 0 1 el' £19, IE 

w^mm^s o i di^astLfca-acsEE*^ 

irx.tffiE0f^¥^ 0ftif<D^f>, ±|^tS*^T 

[0 0 8 7] ^LT, Z<Dm&9$:X?y7S 10 0 8 
■CSE^#llt-^ftSS 9 0 1 f IZk »), YHTBt^{ttD±, 

^rj'T's ioo 9xmmm^it^9 o 1 g *^, 

7D©SEK*Sfa SB 9 0 2 a ^iSff-f5 0 ft 33, r^Yll 

[0 0 8 8] i LT, ^x-^T'S 1 0 1 0T*MtE§^#B 
(0 3^^3.-^ 8 0 2(1, -?:©BEKS^lftgP9 0 2 c{C 
1 "9, SEW#A*»e>S(gLfcaEW*©S**ffil3l*C«» 

e>sm LfcA»T«i-?>o ^f^ysioi 

it-:©IM©S*^, SE^#iimg|59 0 2 d^6>© 
5l5feC©3yfa-^8 0 3 OSEB^SSff SC 9 0 3 d \Z 

[0 0 8 9] ^LT, ^Xi/7°S 1 0 1 2X^\%C<D 
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%omww&^n9 o 3 e-r?u«£j:0 

[0 0 9 0] fcfc\ StSEW#BI4iEK#A©Y»^A^ 
T*£ftiMS<?s *£<z>iEiJ3#«rYjrci«^t;LT» fcfc 

#£Y»-c«#U rt££&a<7)-t, StfYfc-cHHHb 
Lfcf9i-S (i-ftfc*.**) r£tt-t-#ftv\ St 
3lfcCt>*Wfl#Ba»fe3tt«^fcWP!#fc, *roiSfiF 
i-5U»ctt)¥itwM*5^t^, EW#A©Y«as 10 
A^TtftVV&Lt, ^Wf&^Mi^fgT'ifcS, ffi 

[oo9i] Lfcaso-c, Y^wfa^^-efesps 

ioT, S REEK #tf Jt JEfc t«T-fc5:i«If# 

So 

[0 0 9 2] 4fc, »EW##&$]&3l5fcfflfc£*Lfc 
fcK:A@i:U&£;iW«e-5fc«>) , *&£ft i'rolfSfetfSfc 

[0 0 9 3] ft:}b\ ±E«|iEBJ#i: LTiiMft t*<75^ 
ftfltH, SEE**: LTttF»!fcM > fteiffcyro&ftJ# 

is t ^ ft « w 4 1 <*> t? fe 5 a* , r n c m h -rmm^um 

[0 0 9 4] fc^^tf, fc5y7H?i70S»a-f 30 

a» b ^ligfn* , ft ft \cm^¥s<Dmmi)mm s ftfc 

[0 0 9 5] ^f>^-^5/ bwg^tt^J; 9, iiffSSTE 

v-3 Vft^T*Jifftfcft£*<£> h7^#«LT 40 

5 0 ifc, ^--^i/3yeH#Aro®5IHKSr^HL'C 
[0 0 9 6] _b3zEc0J: 5^ffi^(CiIfflT'#, L- 
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[0 0 9 7] SSEW^irLTb, SH^— If-i 

ArofPflBI-Sit/oitar. t^T?#5„ £e>l^ SE^M 
•efcsy7 h<7^T£f±»i, Knfto^ff^Att • u 

tftV\ a- if-gii^roft±£ffl#-f5r<fc#-e# 

[0 0 9 8] ^tLT, r 5 Lfctf-— ^V^IEPJW^^T 1 
AM<lf JWri:^ &£:|3rftfr;h,-CV>fdKg 

[0 0 9 9] ft*, llffiWl^i^S&^ite, 

[0 10 0] ±3£©Hi6©^l»2-eH:» S?IEK# 

[0 10 1] fctili «EiEM#H-¥:©H!»1-5*-A 

mtm%yy vy^Tw^zmm, y ? 

y ZtxZbMW^c g i^^ft-fSi 5tcLT*i< 0 t 
L"C, :»c g i iififtBti^MK^ (1-ft*3*>i&5l*) 
roft»i-5Ail^5*L, ©#L^A«-?iEW»©ll* 

a- -^-aSro^iflllSrfltS-t-S ' t So 
[0 10 2] ±3£©H1E©^*2-<?H % -*f©A 

j;5ftbco, -m^m^m^mhfixi^i,<D, 
LTbiv\ 

[0 10 3] fci:;Lff, SSES#tt ri6A*»tt-*» 
Ver. O^Sfta— tf--e-fj i:V^5-5:^ibft5aE 
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K-K^-'JfrhWya- KLf::#lffl©AjgT\ r© 
ESt^lilL, :©y7 ht^TX'ft&LtzXnKM 

#&A,-?fc<,, :st#roKiK#f±, ±u*-^-Vfrb 

[0 10 4] A»iU«tl4^-^'<-v J -C-^M 

iR-t"3i, £ tt/- x- * ^ A&£ i 9 S& £ ixTi io 

-*§- $ tiXMfr- £ it3 J; 5 lc LX h £ v \ 

[0 10 5] S#*ixfcIEW»^, ^f»m£r 

ffi&&tp;£»©^:y->^-£?3sfl-LT, •?:©£#:& A 

i\ iroifcroisEiftt, uiT-fill©/^ y ^r- 

[0106] 7^*3. ±iELfeHJfe<D^tii*5J:t^2-e 
• Mis, hzwzmwg - • $ra#© 

ffi^;£<7>3f -Cfcofcfciblc:, Yi • AH • U»©HiI 
S*#ro«»] % fc^WoTfc 

x*%mz&mi-zz t&xz z>o>i*m o$.xkfo\ 30 

[0 10 7] 

M©$J|] W-hK93 LtzX 5 1 fcE*0« 

«fc.fc*tff, S&i, JB2j3J:t;jS3«)tir*«yiS611Mt? 

mm 1 o«f*«La^fi^x-^?rm 1 i 9 aaM- 

g 2 ©wfaAaasniAsaifiE* 1 ©gft^a^aimsix 
sat ^si- =t "9 Sfflr $ ^rcx- ? £H 2 ©gti~ <t 19 40 

tm 3 iDtimummmmmm 2 <Dma^m^mm^ 

ftT#/iT-*£gfi1-5lg2©gfi^jai:, SuE»2 
©gffi^&tc i 9 gfSSftfcx-* £11 3 route i 5 3E 
*f-33IS3<D£Sl#®i, fc4S*.fcro-e, ^^m^x- 

gitU fc5Wi^&^©x-^fe«7cLfc^&i!u© 
f-^MiLT> SBESEifeTcilRl— (oaEtfeSrJS-rr. t 
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SlH^iftf-^ itlgm k Jx5 £ v ^5 

[0 10 8] »*3S2^K*©»«I-J:ixfi, IB 
1 33 ±tfg 2 ©fit fgtoagarflT-r-^ Srilgfl 
-^gffii^x-Mr^-C, MffiH 1 wit fftMSSiS 
is® l ©111- J: 9 3 ttfcx- 9 j k£h\z%i <om\z 

sfrtEm 2 roffi«&3gf^MiEi£«¥&a»ki£ff 

gft Ztitzr-9 £3! 3 ©«(: J; 9 mm-f 5* 2 ©3E« 

%ffi^7c©T\ m.Mk^- 9 (Dmk^li't (D 

[0 10 9] »#*3fc:!E*©«93fc.]:*uf, Su 

teit*« i *fc«fs*«2 iiia*©«w^*5v^-c, Suis 

•? $ n § ?5 \zmWM 3<Dm\z.£*>m&ztizkim 
mi<DmK±zmmi<D5c(D7 : -9 ktez<ox\ mm 

-^*S3iL, fc5v^i^tfem©x-^A>f>«7cLfc^ 

-frttt-et 2ofl(r©«jji7c^J:s*JftS& 
[oiio] %m^A\zim<D^.m^^fh\i, m 

l s ^2feiU ? ^3©1*fBMa^g^-ey f -^^illgff 

i-57*-^aisft*»i-*5v^-r, mrnrn i ©tt 

ST\ f - ? *f l roil: J; ^it 51 1 ©f ftii 

i (D^^mmm^hmiM 2 ©it fftMagatc^fi -r 
z>mi<D&\tTMb. Mia^ 2 ©tt n&mmw.x, wis 
m 1 rosifs imr-aifi §t^T # fcx-^ 2 a>m\z z. 

9«»1-5SB2©«*Xgi:, ina«2©*»ia-c* 
*Snfc7*-^Sr, ffiE»2rott#8yii§|*a»e>BirSB& 
3rott«ftyas*naHti-5»2roa^{tiS4:, WiaSB 
3 rottf «&as« t?, miias 2 ©i*mx@-c^ff $ ti/T 

# fcx-^ ^r^ 3 ©Hie j; 9 aEJft-fSfE 3 CMH 

t, *^A/^ero-e, ^.mt<DT'~9 <Dm^\±t(o%m 

^©x'-^/5^«7cL^^tu©x-^*^aLT, ^ 
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[0111] »**5fcBilo«WKJ:*Ltf, JB 

-*Mgft ^ftdfc^T, £ 1 J; D ^IfcSftfc-r 
-*S\ «nE*lo*««Uil!E«-eS6fc»2©«lc:J; 

■caMrsn-rt^-^t, stifs^ 2 wit ^Migtf 
mZBte-tZf-f wiigff tw*jv x'-c, a Sf*- * oft 

[0 112] ft*^6(Cie«(D«BJ(cJ;tli±\ m 

Eg**«4*fcii»*3S5{rE«©3gWl'i3V^t:, MIS 
^i©*^J:!9aE*Sixfc7*-^l±, HfIiam2Wjg[cJ; 
0 § n * b f-BulEB 3 wft ± 9 |g& $ n 5 t ME 
^lWitici^^Mw^cDr-^i^Scot 5 , 

t-tlit'#^^-*t, 2ojtij<75 / S&7t:l-J:5 / £&fJ 

h# m ?r m * 1- s r - 9 <om§im t *s ^ -c , y$ Kf- * 

So 

taut *9 4 ~ss*3g 6 <D^-r jx*»-o{cia* $ tifc^is 
Sr 3 y f * - * I ' H If £ •& 5 7° n y 7 a £ f a & l fc r. t 

i: ^ ^ . miaot, BtFlEfS*JS4~|f*3l6»V> 40 

nail mmmmi iai.f-^g^f->^fAro-> 

[02] Wfommi [ci^x-^iiSft^xASrfll 

[03] ^J£(7)^ffiliC t t5T-^^ff->^Xi,(75t# 50 
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[ H 4 ] Hffi^H 1 ir i 3 r * iigff x ^ [r & 
[0 5] HJ&©0«1 Hi?)x-^iiSff->x^^^jo 

[He] nv&<r>im\ iiisx-^^sft wtam 
its, ^ro^a/s&^sw^iii^Tjvf ^p-^- 
[07] mmmrn 1 t <k sf- * ^sft ^tai^ 

[0 8] *16©^2H iS^-^SISfS^T-^O^ 
[0 9] *Jfe»ff^2(^J;5r-i5 ? ^Sffi ->^x^ro« 

[010] mmmm2\z. t&7 ! —?&$tQi/x i ?Mz 

[011] ^Stfffci 5 f-^lSfi^f A jc*sit 
IiiPJ0-efcSo 

100 -Y ^9—^y Y 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

LThis document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1]A data transmission and reception system which transmits and receives data between 
the 1st, 2nd, and 3rd information processors, comprising: 

The 1st conversion method from which said 1st information processor changes data with the 1st 
key. 

The 1st transmitting means that transmits data changed by said 1st conversion method. 
The 1st reception means that receives data in which a preparation and said 2nd information 
processor have been transmitted from said 1 st transmitting means. 

The 2nd conversion method that changes data received by said 1st reception means with the 
2nd key. 

The 2nd transmitting means that transmits data changed by said 2nd conversion method. 
The 2nd reception means that receives data in which a preparation and said 3rd information 
processor have been transmitted from said 2nd transmitting means. 

The 3rd conversion method that changes data received by said 2nd reception means with the 
3rd key. 

[Claim 2]A data transmission and reception system which transmits and receives data between 
the 1st and 2nd information processors, comprising: 

The 1st conversion method that changes further data from which said 1st information processor 
was changed by the 1 st key with the 2nd key. 

A transmitting means which transmits data changed by said 1st conversion method. 
A reception means which receives data in which a preparation and said 2nd information 
processor have been transmitted from said transmitting means. 

The 2nd conversion method that changes data received by said reception means with the 3rd 
key. 

[Claim 3]Said data transmission and reception system according to claim 1 or 2 if data changed 
by said 1st key is changed by said 2nd key and is further changed by said 3rd key, wherein it will 
turn into the original data before conversion with said 1 st key. 

[Claim 4]A data transmission and reception method which transmits and receives data between 
the 1st, 2nd, and 3rd information processors, comprising: 

The 1st converting process that changes data with the 1st key with said 1st information 
processor. 

With the 1st transmission process that transmits data changed by said 1st converting process 
from said 1st information processor to said 2nd information processor, and said 2nd information 
processor. The 2nd converting process that changes data transmitted by said 1st transmission 
process with the 2nd key, The 2nd transmission process that transmits data changed by said 2nd 
converting process from said 2nd information processor to said 3rd information processor, and 
the 3rd converting process that changes data transmitted by said 2nd transmission process with 
said 3rd information processor with the 3rd key. 
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[Claim 5]A data transmission and reception method which transmits and receives data between 
the 1st and 2nd information processors, comprising: 

The 1st converting process that changes further data changed by the 1st key with the 2nd key 
with said 1 st information processor. 

A transmission process which transmits data changed by said 1st converting process from said 
1st information processor to said 2nd information processor, and the 2nd converting process 
that changes data transmitted by said transmission process with the 3rd key with said 2nd 
information processor. 

[Claim 6]Said data transmission and reception method according to claim 4 or 5 if data changed 
by said 1st key is changed by said 2nd key and is further changed by said 3rd key, wherein it will 
turn into the original data before conversion with said 1st key. 

[Claim 7]A program which makes a computer perform a method indicated to any one of said 
claim 4 - the claims 6. 



[Translation done.] 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]This invention relates to the recording medium which recorded the 
program which makes a computer perform a data transmission and reception system which 
transmits and receives data via between the 3 persons from whom a position differs, a data 
transmission and reception method, and a method for the same and in which computer reading is 
possible. 
[0002] 

[Description of the Prior Art]Generally as encoding technology for performing communication 
between a sending person and an addressee safely now, two methods, i.e., (1) common secret 
key method, and (2) public key systems are known widely. 

[0003](D A common secret key method is a method to which B decodes the data which the both 
sides of sending person A and the addressee B held the same key, and A enciphered with the 
key with the same key. However, with this method, he is a holder (everybody but a person that 
came to hand justly like B) of the above-mentioned key. those who received by the inaccurate 
means — containing — what is called "spoofing" that enciphers with the above-mentioned key 
after alteration (alteration) or forgery (fabrication), misrepresents data as self being A, and 
transmits to a third party etc. cannot be prevented. 

[0004]Although RSA is one of the typical things of an another side (2) public key system, this is 
a method which two keys which become a pair are prepared, the sending person A uses one 
more as a public key by using one as a secret key, and the addressee B holds, respectively. A 
enciphers data with this secret key, and B decodes the data concerned by the public key which 
becomes the above-mentioned secret key and a pair. From the public key delivered between AB 
(s), since it is actually impossible to specify a secret key, as long as the secret key is managed 
safely, it is set only to A that encryption with the key concerned can be performed, and the 
problem of above-mentioned "spoofing" is not generated. 
[0005] 

[Problem(s) to be Solved by the Invention]However, each thing it is [ thing ] common in the 
above-mentioned conventional technology is that only two persons of the sending person A and 
the addressee B are taking into consideration. On the other hand, the third party from whom a 
position differs further in addition to the 2 persons from whom the various dealings generated in 
real society, a relation, etc. are more complicated, and a position differs involves frequent. 
[0006]For example, there is settlement of accounts by a credit card typically. A card issuer, a 
card user, and three persons of a member s store are participating in these dealings. It seems 
that that procedure is shown in dra wing 1 1 when the public key system of the above (2) tries to 
perform these settlement-of-accounts dealings safely in networks, such as the Internet. 
[0007](a) Beforehand [ of a key / delivery ] card issuer A generates the secret key Ka of the 
couple for its company, and public key Ka', and sends (1) and this public key Ka to it at each 
member's store (2). Each member's store generates the secret key Kc of the couple for self- 
stores, and public key Kc\ respectively (3). 

[0008](b) Those who try to apply for use of the delivery card of card information newly generate 



JP,2002-281020,A [DETAILED DESCRIPTION] 



2/13 ^v— v 



the secret key Kb for the persons themselves himself/herself, and public key Kb' first (4). And 
among these, only public key Kb' is sent to card issuer A with the necessary information of a self 
name, an address, etc. (5). B generates this secret key Kb and public key Kb' as mentioned 
above, they may not pass Kb' to A, but A may generate them, and they may pass Kb to B. 
[0009]Next, card issuer A will send card information, public key Kb' specifically received from the 
card number of B, or B, its name, address of the card user B concerned, etc. to B after 
encryption (6) with the secret key Ka of A, if the above-mentioned application is received (7). 
[0010](c) Order / order received, and the card user B of goods are a homepage etc. which the 
member's store C opens, and order the goods (not only a material article but immaterial service 
etc. shall be included) of hope. (8) and (9) which specifically encipher order contents, such as a 
trade name, the number, the amount of money, with the secret key Kb of B, and add further the 
card information received from A to this — it is things and the order sheet of a predetermined 
format is drawn up. And this whole order sheet is sent to the members store C after encryption 
(11) by public key Kc f of the members store C downloaded from the above-mentioned homepage 
(10) (12). 

[001 1]At the member's store C, it decodes by public key Ka' of (2) A which decoded the order 
sheet received from the card user B with the secret key Kc of C, and received from A (13) and 
the card information further enciphered with the secret key Ka of A in the order sheet after 
decoding (14). 

[0012]In this decoded card information, since public key Kb' of B is contained as mentioned 
above, the order content enciphered with the secret key Kb by this can be decoded (15). It can 
have that decoding by Kb' was successful, and C can check that the above-mentioned order 
content is enciphered by Kb, i.e., the thing for which the above-mentioned order was emitted by 
the B person himself/herself holding the secret key Kb. 

[0013](d) If a predetermined bundle day comes after this [ of a price / claim / settlement-of- 
accounts ], the members store C will charge the payment of the card users B purchase price to 
card issuer A (1 6). In card issuer A, after sending the specification of the total use amount to 
the card user B and obtaining the check, price transfer to price pulling down from the card users 
B account and the account of the members store C is performed (17). 

[0014]Thus, in conventional technology, two or more encryption and decodings with a key must 
be performed repeatedly, and processing is complicated and complicated. (12) from which only 
encryption by Kc' sends card information (7) to which card user B was sent from card issuer A 
to members store C by (1 1) sake, For example, it cannot prevent diverting the card information 
on B (13) decoded by Kc, and forging an order sheet, and the member's store C being set to B, 
clearing up, and placing an order for other members stores. 

[0015]By the use details sent to B, the ex post check was in discovery of an unauthorized use 
of a possible thing after price pulling down in many cases, and does not understand the 
whereabouts of C anymore in many cases at the time. 

[0016]And although investigating after all whether each members store can be trusted whenever 
card issuer A or the card user B is dealings is only lost for prior prevention, It also has a heavy 
burden that A responds to the individual inquiry (******** [ that C is a regular member s store ] 
etc.) from B in detail actually as for A not leaking the store on the Internet and investigating it. 
Since there is a limit in B individual's inquiry capability, even if it has a credit card, there are also 
many users who hesitate electronic banking for fear of the unauthorized use of the card number 
by C. 

[0017]on the contrary, the maker of an order sheet who received also as a members store — a 
card user — since that distinction which is the person himself/herself or is the fraudulent 
procurement person who obtained card information from the user concerned [ a member's 
store ] does not stick, a check of the person himself/herself must be taken by E-mail etc. 
separately. However, the case which becomes the person himself/herself and disputes by 
arrival/non-delivery of a confirmation mail also has a work burden comparatively [ large ], and it 
cannot necessarily be said that a price is safely recoverable. 

[0018]Although the method which sends the card number which can be used only once besides 
the above, the method which avoids sending of a card number by trading via a provider for 
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exclusive use, etc. are proposed, The provider whom the time and effort of issue is taken each 
time, and a receipt partner cannot specify, either takes a margin in many cases, and there is a 
fault, like there is few opening a shop. Although there are a method etc. which restrict the 
amount of use / amount of damage to a fixed limit with a prepaid card, what the time and effort 
of purchase is taken, and also exceeds a limit cannot be purchased, but there is a problem of 
being hard to use. 

[0019]Thus, the conventional encryption / decryption art has borne communication between 2 
persons in mind for the thing with difficult safe pay by card chiefly by conventional technology, 
and it is because it is not optimized by the use which performs safe communication between 3 
persons. 

[0020]In order that this invention may solve the problem by the above-mentioned conventional 
technology, while preventing forgery and alteration of the data concerned in transmission and 
reception of the data which goes via between different 3 persons, Only the first sending person 
and the last addressee aim at providing the recording medium which recorded the program which 
makes a computer perform a data transmission and reception system which can peruse the 
contents of data easily, a data transmission and reception method, and a method for the same 
and in which computer reading is possible. 
[0021] 

[Means for Solving the Problem]In order to solve a technical problem mentioned above and to 
attain the purpose, a data transmission and reception system concerning the invention according 
to claim 1, In a data transmission and reception system which transmits and receives data 
between the 1st, 2nd, and 3rd information processors, The 1st conversion method from which 
said 1st information processor changes data with the 1st key, The 1st transmitting means that 
transmits data changed by said 1st conversion method, The 1st reception means that receives a 
preparation and data in which said 2nd information processor has been transmitted from said 1st 
transmitting means, The 2nd conversion method that changes data received by said 1st 
reception means with the 2nd key, The 2nd transmitting means that transmits data changed by 
said 2nd conversion method, A preparation and said 3rd information processor were provided 
with the 2nd reception means that receives data transmitted from said 2nd transmitting means, 
and the 3rd conversion method that changes data received by said 2nd reception means with the 
3rd key. 

[0022]According to this invention according to claim 1, the holder of data after conversion 
cannot alter data before conversion which fabricated data before conversion by conversion origin 
in front of that, or was restored from data after conversion, and cannot perform the same 
conversion as the conversion origin concerned. 

[0023]A data transmission and reception system concerning the invention according to claim 2 
equips with the following a data transmission and reception system which transmits and receives 
data between the 1 st and 2nd information processors. 

The 1st conversion method from which said 1st information processor changes further data 
changed by the 1st key with the 2nd key. 

A transmitting means which transmits data changed by said 1st conversion method. 
A reception means in which a preparation and said 2nd information processor receive data 
transmitted from said transmitting means, and the 2nd conversion method that changes data 
received by said reception means with the 3rd key. 

[0024]According to this invention according to claim 2, the holder of data after conversion 
cannot alter data before conversion which fabricated data before conversion by conversion origin 
in front of that, or was restored from data after conversion, and cannot perform the same 
conversion as the conversion origin concerned. 

[0025]A data transmission and reception system concerning the invention according to claim 3, 
In said invention according to claim 1 or 2, if data changed by said 1 st key is changed by said 
2nd key and is further changed by said 3rd key, it will turn into the original data before 
conversion with said 1 st key. 

[0026]According to this invention according to claim 3, data before conversion which a holder of 
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data after conversion fabricated data before conversion by conversion origin in front of that, or 
was restored from data after conversion is altered, While the same conversion as the conversion 
origin concerned cannot be performed, data before conversion by conversion origin before two 
can be restored. 

[0027]A data transmission and reception method concerning the invention according to claim 4, 
In a data transmission and reception method transmitted and received, data between the 1 st, 
2nd, and 3rd information processors with said 1st information processor. With the 1st converting 
process that changes data with the 1st key, the 1st transmission process that transmits data 
changed by said 1 st converting process from said 1 st information processor to said 2nd 
information processor, and said 2nd information processor. The 2nd converting process that 
changes data transmitted by said 1st transmission process with the 2nd key, With the 2nd 
transmission process that transmits data changed by said 2nd converting process from said 2nd 
information processor to said 3rd information processor, and said 3rd information processor. The 
3rd converting process that changes data transmitted by said 2nd transmission process with the 
3rd key was included. 

[0028]According to this invention according to claim 4, the holder of data after conversion 
cannot alter data before conversion which fabricated data before conversion by conversion origin 
in front of that, or was restored from data after conversion, and cannot perform the same 
conversion as the conversion origin concerned. 

[0029]A data transmission and reception method concerning the invention according to claim 5, 
In a data transmission and reception method which transmits and receives data between the 1st 
and 2nd information processors, The 1 st converting process that changes further data changed 
by the 1 st key with the 2nd key with said 1 st information processor, A transmission process 
which transmits data changed by said 1st converting process from said 1st information 
processor to said 2nd information processor, and the 2nd converting process that changes data 
transmitted by said transmission process with the 3rd key with said 2nd information processor 
were included. 

[0030]According to this invention according to claim 5, the holder of data after conversion 
cannot alter data before conversion which fabricated data before conversion by conversion origin 
in front of that, or was restored from data after conversion, and cannot perform the same 
conversion as the conversion origin concerned. 

[0031] A data transmission and reception method concerning the invention according to claim 6, 
In said invention according to claim 4 or 5, if data changed by said 1st key is changed by said 
2nd key and is further changed by said 3rd key, it will turn into the original data before 
conversion with said 1 st key. 

[0032]According to this invention according to claim 6, data before conversion which a holder of 
data after conversion fabricated data before conversion by conversion origin in front of that, or 
was restored from data after conversion is altered, While the same conversion as the conversion 
origin concerned cannot be performed, data before conversion by conversion origin before two 
can be restored. 

[0033]It becomes possible to make a method indicated to any one of said claim 4 - the claims 6 

enforce by computer of a program concerning the invention according to claim 7. 

[0034] 

[Embodiment of the Invention]The suitable embodiment of the recording medium which recorded 
on below the program which makes a computer perform a data transmission and reception 
system by this invention, a data transmission and reception method, and a method for the same 
with reference to the accompanying drawing and in which computer reading is possible is 
described in detail. 

[0035](Embodiment 1) The system configuration of the data transmission and reception system 
by this embodiment of the invention 1 is explained first. Drawing 1 is an explanatory view 
showing the system configuration of the data transmission and reception system by Embodiment 
1. Among the figure, it is a computer by which card issuer A manages 101, a computer by which 
the card user B holds 102, and a computer by which the members store C manages 103, and 
100 shows the Internet to the network and concrete target which connect each of above- 
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mentioned computers mutually. 

[0036]Below, the hardware constitutions of each computer which constitute the data 
transmission and reception system by this embodiment of the invention 1 are explained. Drawing 
2Js an explanatory view showing an example of the hardware constitutions of the computers 
101-103 by Embodiment 1. Below, it shall have hardware constitutions with each computer same 
for convenience of explanation. 

[0037]In the figure, RAM for which 203 are used as a work area of CPU201 in ROM 202 
remembered the intercalation output program to be for CPU by which 201 controls the whole 
device is shown, respectively. 

[0038]HD which memorizes the data in which HDD (hard disk drive) by which 204 controls the 
read/write of the data to HD(hard disk) 205 according to control of CPU201 was written in 205 
according to control of HDD204 is shown, respectively. 206 FDD (floppy disk drive) which 
controls the read/write of the data to FD(floppy (registered trademark) disk) 207 according to 
control of CPU201, 207 shows FD which can be detached and attached and which memorizes 
the data written in according to control of FDD206, respectively. 

[0039]The display on which 208 displays various data, such as cursor, a menu, a window or a 
character, and a picture, 209 shows network I/F (interface) which transmits and receives the 
data from/to the Internet 100 via the communication line 210, respectively. The mouse in which 
212 performs the keyboard with which 21 1 was provided with two or more keys for inputs, such 
as a character, a numerical value, and various directions, for selection of various directions, 
execution and selection of a processing object, movement of cursor, etc. is shown, respectively. 
[0040]The printer with which 214 prints a character and a picture for the scanner with which 213 
reads a character and a picture optically on a paper, A bus or a cable for 200 to connect each 
part of the above for the CD-ROM drive with which 216 control the lead of data [ as opposed to 
CD-ROM215 for CD-ROM whose 215 is a removable recording medium ] is shown, respectively. 
[0041]Below, the functional composition of the data transmission and reception system by this 
embodiment of the invention 1 is explained. Drawing 3 is an explanatory view showing 
functionally the composition of the data transmission and reception system by Embodiment 1. 
[0042]As shown in the figure, the computer 101 of card issuer A is the composition containing 
the key generation part 301a, the key storage part 301b, the key transmission section 301c, the 
card information storage part 301 d, the card information encryption section 301 e, and the card 
information transmission section 301 f. 

[0043]The card user's B computer 102 is composition including the card information reception 
part 302a, the card information storage part 302b, the key receive section 302c, the card signal 
transduction part 302d, the order sheet preparing part 302e, and the order sheet transmission 
section 302f. 

[0044]The computer 103 of the members store C is the composition containing the key receive 
section 303a, the key storage part 303b, the key transmission section 303c, the order sheet 
receive section 303d, the card information storage part 303e, and the card information decoding 
part 303f. 

[0045]According to the command of a program in which each part of the above was read from 
various recording media, such as HD205 of each computer, FD207, CD-ROM215, to RAM203, 
When CPU201 etc. performs instruction processing, each function mentioned later is realized. 
Each part of the above in the card users B computer 102 is especially specifically realized by 
plug-in of a browser. 

[0046]Dr awing 4 is a flow chart which shows the procedure of the delivery processing of a key 
performed by each part of the above in advance of order/processing order of the goods later 
mentioned by drawing 6 . Along with this flow chart, the function of each part of the above is 
explained below. 

[0047] At Step S401, the computer 101 of card issuer A first generates three keys of Y key, A 
key, and U key explained below by the key generation part 301a. "These keys, if what was 
enciphered with Y key is not after conversion with A key, it cannot be decoded with U key, The 
conditions that it is difficult to be unable to decode it with Y key if what was enciphered with A 
key is not after conversion with U key, and to specify other keys with the combination of which 
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key or every two key" must be fulfilled. 

[0048]Although it may ask for such three keys how, how to extend and apply the derivation 
method of the key in a RSA method which is a kind of the public key system of conventional 
technology here, and to ask for it is shown. 

[0049]The secret key and two keys of a public key which are used by RSA are drawn as follows. 
First, the two prime numbers P and Q are chosen, and two values, "N=P*Q" and "L= least 
common multiple (P-1, CM)", are calculated. And it asks for D and M in which "D*M=n*L+l" is 
materialized (however, n arbitrary positive integers), and use D as a secret key and let M be a 
public key. 

[0050]The following formula performs encryption and decoding using these. "Data~D" shows the 
remainder arithmetic of taking the remainder into which "mod N" divided the Dth power of Data 
by N again, respectively. 

Encryption: Coded=(Data~D) mod N decoding : Data =(Coded~M) mod N [0051 ]On the other hand, 
it asks for Y, A, and U in which "Y*A*U=n*L+1 " is materialized instead of asking for D and M in 
which "D*M=n*L+l" is materialized, since three keys are required in this invention. However, Y, 
A, and U must not be n*L+1, respectively. It can ask for the group of such Y, A, and U by the 
following from the group of D and M which satisfies "D(i)*M(i)=n*L+1." 
[0052] 
Y =D(0) 
A(i)=D(i) 

U(i)=(M(0)*M(i)-1)mod L+1 [0053]And it is with these three keys and the following formula 
performs encryption and decoding. 
Encryption: Coded =(Data~Y) mod N ... (1) 
Conversion :Coded2=(Coded~A) mod N ... (2) 
Decoding :Data =(Coded2~U) mod N ... (3) 

[0054]The encryption by (1) type serves as processing in card issuer A, processing [ in / in the 
conversion by (2) types / the card user B ], and processing [ in / in decoding by (3) types / the 
members store C ] so that it may mention later by drawing 6 . 

[0055]Since it is more intelligible to include encryption and decoding in conversion in a broad 
sense, and to merely call them in this way paying attention to the purpose of conversion or a 
result, Below, conversion of as [ whose data before conversion is a plaintext especially among 
conversion ] will be called encryption, and conversion of as [ whose data after conversion is a 
plaintext conversely ] will be called decoding, respectively. 

[0056]It returns to drawing 4 and then the computer 101 of card issuer A stores in the key 
storage part 301b three keys generated above at Step S402. A key and U key are transmitted to 
the computer 103 of the members store C, and a concrete target from the key transmission 
section 301c among the above at Step S403 in the key receive section 303a. And the computer 
1 03 of the members store C stores two received keys in the key storage part 303b at Step 
S404. 

[0057]As shown also in the formula which derives a key, two or more groups of A key and U key 
corresponding to one Y key exist. And the group of A key different, respectively and U key 
corresponding to one Y key which card issuer A holds is passed to each members store below 
two or more members stores C to one card issuer A. 

[0058]Next, drawing 5 is a flow chart which shows the procedure of the delivery processing of 
card information performed by each part shown in drawing 3 in advance of order/ processing 
order of the goods later mentioned by drawing 6 . Along with this flow chart, the symbol 
description of each part of the above is continued below. The processing by this flow chart is 
started when card issuer A receives the card use application from the proposer B. 
[0059] At Step S501, the computer 101 of card issuer A registers the card number, a name, an 
address, a telephone number, etc. into the card information of the proposer (card user B) 
concerned, and a concrete target first at the customer database in the card information storage 
part 301 d. 

[0060]At Step S502, the computer 101 of card issuer A enciphers the card users B card 
information taken out from the card information storage part 301 d in the card information 
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encryption section 301 e with Y key taken out from the key storage part 301b. That is, according 
to above-mentioned (1) type, "Coded" (it is the card information after encryption with Y key) is 
created from "Data" (here card information on a plaintext). 

[0061]Next, the computer 101 of card issuer A transmits the card information after conversion 
with Y key to the card user's B computer 102, and a concrete target from the card information 
transmission section 301f at Step S503 at the card information reception part 302a. And the 
card users B computer 102 stores in the card information storage part 302b the card 
information received above at Step S504. 

[0062]Next, d r a w i n g 6 is a flow chart in the data transmission and reception system by this 
embodiment of the invention 1 which shows the procedure of order/processing order of goods. 
Along with this flow chart, explanation of the function of each part shown in dra wing 3 is 
continued below. When the card user B places an order for goods by the homepage of the 
member's store C, etc., the processing by this flow chart specifically inputs necessary 
information into predetermined order form etc., and when the "O.K." button etc. are clicked, it is 
started. 

[0063]The card user's B computer 102 is required as transmitting the A key to the computer 103 
of the member's store C by the key receive section 302c at Step S601. And if the above- 
mentioned demand is received in the key transmission section 303c, the computer 103 of the 
members store C will take out A key stored in the key storage part 303b, and will reply it to the 
key receive section 302c of a requiring agency. 

[0064]Next, the card user's B computer 102 is changed in the card signal transduction part 302d 
with A key which received above the card information taken out from the card information 
storage part 302b at Step S602. That is, according to above-mentioned (2) types, 
"Coded2" (card information further changed with A key after encryption with Y key) is created 
from "Coded" (it is the card information after encryption with Y key). 

[0065] And at Step S603, by the order sheet preparing part 302e, the card user's B computer 102 
is adding the card information after conversion to the order content of the plaintext which 
consists of a trade name, the number, etc. above, and draws up the order sheet of a 
predetermined format. Then, this order sheet is transmitted from the order sheet transmission 
section 302f at Step S604, and this is received by the order sheet receive section 303d of the 
computer 103 of the members store C. 

[0066]Next, the computer 103 of the member's store C stores in the card information storage 
part 303e the card information in the order sheet received above at Step S605 as it is (namely, 
with the state where it was enciphered with Y key and changed by A key). On the other hand, 
the card information in the order sheet received in the card information decoding part 303f at 
Step S606 is decoded with U key. That is, according to above-mentioned (3) types, the original 
"Data" (card information on a plaintext) is restored from "Coded2" (card information further 
changed with A key after encryption with Y key). 

[0067]Next, drawing 7 is an explanatory view in the data transmission and reception system by 
this embodiment of the invention 1 showing the data flow between each computer typically. 
[0068](a) A key delivers, and first, generate Y key, A key, and U key in card issuer A a priori, 
choose one from two or more combination of (1), A key, and U key, and send to each member's 
store (2). 

[0069](b) Send delivery of card information, and each card user s card information to upper (3) of 
encryption, and everybody with this Y key (4). 

[0070]At the time of an order of order/ordered commodity of goods, from the homepage of the 
member's store C, etc., the card user B downloads the A key, and it (c) (5), The card information 
after encryption is further changed with this A key with Y key, (6) and this are added to the 
order content of a plaintext (7), an order sheet is drawn up, and it sends to the member's store 
C (8). These processings are automatically performed by plug-in of a browser at the time of 
transmission of order form, and special operation is unnecessary. And in the member's store C, 
while backing up the card information in the order sheet received from the card user B, this is 
decoded with U key (9). 

[0071](d) If the claim / settlement-ofHaccounts next predetermined bundle day of a price comes, 
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the members store C will attach the backed up card information to a bill to card issuer A, and 
will charge the payment of each user's purchase price (10). 

[0072]In card issuer A, while sending the specification of the total use amount to each user, 
when backup of the submitted card information cannot decode normally with U key, it judges that 
there is doubt of forgery by the member's store C, and the user made into the order Lord is 
separately asked for the check of purchase existence. And when this check was obtained, or 
when there are no abnormalities in decoding with U key, price transfer to price pulling down from 
each user's account and the account of each members store is performed (11). 
[0073]As compared with the conventional technology shown by drawing 11 , it turns out that the 
procedure of encryption or decoding is also simplified for the number of a key in the half by this 
invention shown in drawing 7 . (Eight) card information over the members store C from the card 
user B, (9) which the card information (4) sent from card issuer A is (6) things further changed 
with A key, and decodes this with U key in the member's store C, and is returned to a plaintext - 
- even if things are made, they cannot be returned to the state (namely, only state enciphered 
with Y key) before conversion with A key. 

[0074]Therefore, it is impossible for forgery of the order sheet by the member's store C except 
addressing to a self-store. It is because the card information (namely, state sent from card 
issuer A) only on the state always enciphered with Y key is required for forgery of an order 
sheet to other member s store C\ 

[0075]On the contrary, if the card information part in the received order sheet can decode 
member's store C which is others with IT key of self, It can be judged that the card information 
concerned is not what forged the order sheet by turning out to be what was changed with A' key 
of self, and the member's store C of the inaccurate purpose becoming the card user B, and 
clearing up, the card user B, i.e., the just right holder, holding the card information in the state 
where it was sent from card issuer A. 

[0076]As explained above, though it is simple encryption with three keys, since forgery of card 
information is dramatically difficult, in the data transmission and reception system by 
Embodiment 1, pay by card between 3 persons can be performed simply and safely. 
[0077]In order to avoid confusion above, omitted explanation, but. Transmission of the key from 
the key transmission section 301c to the key receive section 303a ((2) of drawing 7), At the time 
of transmission (said (4)) of the card information from the card information transmission section 
301f to the card information reception part 302a, and transmission (said (8)) of the order sheet 
from the order sheet transmission section 302f to the order sheet receive section 303d, a 
communication content is enciphered with the key other than Y key, A key, and U key for 
communication. However, since maintenance of secret severe about especially front 2 persons is 
required, it may be made to send not with on-line but with off-line, for example, mail etc. 
[0078]Although (Embodiment 2), now Embodiment 1 mentioned above were examples to which 
three persons actually participate in dealings, The dealings which can be regarded as three 
persons involving substantially, such as a case which trust a recommendation, a letter of 
introduction, a guarantee, a certificate, etc. which the acquaintance common to real society and 
the public institution published and in which it trades among 2 persons, also exist. And also in 
such dealings, since forgery and alteration of various documents often pose a problem, 
encryption and decoding with three keys may be applied to various kinds of bonds like 
Embodiment 2 described below. 

[0079] Drawing 8 is an explanatory view showing the system configuration of the data 
transmission and reception system by Embodiment 2. The computer by which the testifier A 
holds 801 among a figure, the computer by which the testifier B holds 802, 803 is a computer 
which the other party C who deals with the testifier B holds, and 800 shows the Internet to the 
network and concrete target which connect each of above-mentioned computers mutually. Let 
the hardware constitutions of each computer be the same thing as it of Embodiment 1 which 
showed drawing 2. 

[0080]Next, drawing 9 is an explanatory view showing functionally the composition of the data 
transmission and reception system by Embodiment 2. As shown in the figure, the testifier's A 
computer 801 is composition including the key storage part 901a, the key selecting part 901b, 



JP,2002~281020,A [DETAILED DESCRIPTION] 



9/13 ^— v 



the key transmission section 901c, the proof matter storage parts store 901 d, the certificate 
preparing part 901 e, the certificate encryption section 901 f, and the certificate transmission 
section 901 g. 

[0081]The testifiers B computer 802 is composition including the certificate receive section 
902a, the key receive section 902b, the certificate converter 902c, and the certificate 
transmission section 902d. The customer s C computer 803 is the composition containing the 
key receive section 903a, the key storage part 903b, the key transmission section 903c, the 
certificate receive section 903d, and the certificate decoding part 903e. 

[0082]According to the command of a program in which each part of the above was read from 
various recording media, such as HD205 of each computer, FD207, CD-ROM215, to RAM203, 
When CPU201 etc. performs instruction processing, each function mentioned later is realized. 
[0083]Next, drawing 10 is a flow chart in the data transmission and reception system by 
Embodiment 2 which shows the procedure of certificate issuing and presentation processing. 
Along with this flow chart, the function of each part shown in drawing 9 is explained below. 
[0084]At Step S1001, the customers C computer 803 is first required as transmitting A key and 
U key to the testifier s A computer 801 from the key receive section 903a. The computer 801 of 
the testifier A who received this demand by that key transmission section 901c, One which has 
not been used for other individuals yet among [ of A key and U key which are beforehand 
generated by the key selecting part 901b, and are stored in the key storage part 901a at Step 
S1002 ] pairs of couples is chosen. And this selected A key and U key are replied to the key 
receive section 903a of a requiring agency from the key transmission section 901c at Step 
S1003. 

[0085]The customer's C computer 803 transmits them to the key receive section 902b of the 
testifier's B computer 802 from the key transmission section 903c at Step S1005 while storing in 
the key storage part 903b A key and U key which were received at Step S1004. 
[0086]The testifier's B computer 802 transmits the issue requesting of a certificate from the 
certificate receive section 902a to the testifier's A computer 801 at Step S1006. The computer 
801 of the testifier A who received this issue requesting in that certificate transmission section 
901 g, At Step S1007, by the certificate preparing part 901 e, the matter specified in the above- 
mentioned issue requesting is extracted out of various kinds of proof matters accumulated in the 
proof matter storage parts store 901 d, for example, an address, a date of birth, etc., and the 
certificate of a predetermined format is drawn up. 

[0087]And by Step S1008, by the certificate encryption section 901f f this certificate is replied to 
the certificate receive section 902a of a requiring agency from the certificate transmission 
section 901 g at Step S1009, after enciphering with Y key. this Y key — the certificate after 
encryption — the following — "the original of a certificate" — or it is only called the "original." 
[0088]And the original of the certificate which received the testifier's B computer 802 from the 
testifier A by the certificate converter 902c at Step S1010 is changed with A key received from 
the customer C. Then, the original after this conversion is transmitted to the certificate receive 
section 903d of the customer's C computer 803 from the certificate transmission section 902d 
at Step S1011. 

[0089]And the original after the conversion which received the customer s C computer 803 
above at Step S1012 is decoded with U key by the certificate decoding part 903e. 
[0090]Unless the testifier B can obtain the testifiers A Y key, a fictitious certificate is 
enciphered with Y key, It can be made to look as if it was published by the testifier A (namely, 
forgery), or the original received from the testifier A can be decoded with Y key, and after 
altering the contents, it can encipher with Y key again (namely, alteration). If the customer C can 
only return the certificate received from the testifier B to a plaintext with the U key to hold and 
cannot obtain the testifier s A Y key at all, the forgery and alteration are impossible. Since 
decoding with U key will become unusual in impossible if these are performed by force, the fact 
of a malfeasance is revealed. 

[0091]Therefore, as long as management of Y key is thoroughgoing, even if the receiver of a 
certificate does not refer to the testifier in detail, the received certificate has that it has 
decoded normally with U key, and it can check that the certificate concerned is genuine. 
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[0092]Since other customers cannot decode the certificate changed for [ with a testifier ] 
customers, it does not have a certificate decoded by the partner who does not mean even if 
there are accidents, such as loss (since A key differs from U key for every customer). When a 
testifier is conversion of the original, it is good although the partner who can peruse the 
certificate concerned can be limited with the key used for conversion. 

[0093]Although public documents, such as a copy of a family register and a resident card, are 
typical as public institutions, such as the government, and a certificate as the above-mentioned 
testifier, what kind of thing may the items mentioned of not only this but a testifier or a 
certificate be? 

[0094]For example, it is a registered user of a certain software, and the user in whom product 
guidance etc. have reached the registration address over fixed time can regard it as the 
customer for whom the address was stabilized only in it and who can trust it comparatively. 
Then, the development origin of software serves as certifying authority, and about the arbitrary 
matters specified by each registered user among various matters, such as a day when delivery of 
mail was checked by a user registration date, a registration product name, and the last, a 
certificate is drawn up and it delivers after encryption. 

[0095]By the anonymity of the Internet, troubles, such as fraud, are occurring frequently at the 
mail order or the auction, For example, the customer is sorted out in the mail-order firm, 
applying [ a customer is extracted to the individual and legal entity which keeps unchanged and 
has a telephone, or (since trust cannot be taken in a cellular phone), purchase a customer list 
from other companies, and ] many expenses and labors. Although there are some which exhibit 
each one of transaction histories at an auction, it is the trust 0 at the participant who can trust 
it, or the beginning, and if the participant who cannot trust it conversely also acquires another 
ID, it will be able to pretend to be another person easily. 

[0096]It can apply easily as mentioned above, and moreover, if forgery and alteration are this 
point and a difficult user certificate, a mail-order firm and the sponsor of an auction can only 
submit a certificate beforehand, and an orderer and a participant can be narrowed down to the 
user who can trust it comparatively. 

[0097]A kind of status which was not evaluated conventionally which is called a registered user 
also as a testifier can be connected to an individuals evaluation. The software developer which 
is certifying authority can collect a fee at the time of issue of a certificate and handing out (or 
loan) of A key and U key. and also can expect improvement in a users registration rate in 
connection with a registered users status being evaluated socially. 

[0098]And it is expectable that disclosure of the personal information to the partner who black- 
marketing of a customer list currently performed conventionally is lost, and does not mean by 
the system of such an open proof being employed widely decreases. 

[0099]With the customer by Embodiment 2, it does not necessarily restrict to the other party of 
sales transactions, such as a mail order and an auction. For example, in the bulletin board etc. 
which limit the participant to the registered user of a certain software, If U key and A key are 
delivered to the administrator and an user certificate is delivered to a participating candidate 
from the development origin of the software concerned, respectively, the reply from inquiry [ to 
a developing agency ] or development origin cannot be required, but the existence of each 
candidate's participating qualification can be easily checked after an administrator. 
[0100]When a testifier has to give many customers the same proof, it may be made to die in 
above-mentioned Embodiment 2, to take a testifier s certificate from a customer s way 
conversely, although the certificate was submitted from the testifier to the customer. 
[0101]For example, if the logo of the user certificate acquired from the software developer and 
the software concerned is stuck on the homepage to open and a logo is clicked, cgi for exclusive 
use will start a testifier. And A key which a visitor (namely, customer) holds at the time of 
starting is required, and this cgi replies it to the visitor concerned, after changing the original of a 
certificate with acquired A key. The visitor can decode the acquired certificate with the U key to 
hold, and can check the details of user's registration of the testifier concerned. 
[01 02] Although it avoided that the contents of the certificate were perused by the other 
outsider at above-mentioned Embodiment 2 by delivering A key and U key of a couple to specific 
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individual and legal entity restrictively, conversely, as long as it is a thing which wants to 
advertize the contents of the certificate to the world, the thing upon which a duty of a general 
display is imposed, or a thing which does not interfere whoever sees at least, it may be made to 
exhibit these keys in certifying authority 

[0103]For example, a testifier applies for the certificate which consists of one sentence "Taro 
Tokushima is a registered user of Ichitaro Ver.O" to the development origin of the software 
concerned, and has it published (since it is enciphered with Y key, of course, this plaintext 
cannot necessarily be read). And with general-purpose A key downloaded from the homepage of 
the development origin concerned, this certificate is changed and it embeds in the document 
drawn up by this software. The visitor of a document decodes the certificate after conversion 
with general-purpose U key downloaded from the above-mentioned homepage, and gets the 
above-mentioned plaintext. 

[0104]If A key and U key are not exhibited by a homepage, it includes in the software itself, for 
example, "embedding of an user certificate" is chosen from a menu, When the specified data is 
changed by A key, and it is included in a document and "a display of an user certificate" is 
chosen, the data after the conversion embedded in the document is decoded, and it may be 
made to be expressed as U key it. 

[0105]After attaching the hash keys of the document embedding the certificate concerned to 
the delivered certificate and changing the whole into it with A key, it may be made to embed in 
the document concerned. The visitor of this document sends the hash keys after conversion to 
the development origin holding Y key with U key, and checks whether in response to the reply of 
the hash keys decoded with Y key, it is in agreement with the value of the hash keys calculated 
with the hand. And if both are in agreement, in the document concerned, it can be judged as a 
thing without an alteration. 

[0106]In Embodiments 1 and 2 mentioned above, since three persons of the other party of a 
card issuer, a card user and a members store, or a testifier, a testifier and a testifier 
participated in transfer of data, generated three kinds of keys of Y key, A key, and U key, but. 
The number of the parties concerned (the number of the parties concerned from which a 
position differs strictly.) the classification of the party concerned, etc. — it may say — if more 
than it, it cannot be overemphasized that the key of the number and same number can be 
generated and this invention can be applied. 
[0107] 

[Effect of the Invention]In the data transmission and reception system which transmits 
[ according to the invention according to claim 1 ] and receives data between the 1st, 2nd, and 
3rd information processors as explained above, The 1st conversion method from which said 1st 
information processor changes data with the 1st key, The 1st transmitting means that transmits 
the data changed by said 1st conversion method, The 1st reception means that receives a 
preparation and the data in which said 2nd information processor has been transmitted from said 
1st transmitting means, The 2nd conversion method that changes the data received by said 1st 
reception means with the 2nd key, The 2nd transmitting means that transmits the data changed 
by said 2nd conversion method, Since a preparation and said 3rd information processor were 
provided with the 2nd reception means that receives the data transmitted from said 2nd 
transmitting means, and the 3rd conversion method that changes the data received by said 2nd 
reception means with the 3rd key, In transmission and reception of the data which goes via 
between the 3 persons who the holder of the data after conversion cannot alter the data before 
the conversion which fabricated the data before conversion by the conversion origin in front of 
that, or was restored from the data after conversion, and cannot perform the same conversion 
as the conversion origin concerned, but change with these, The effect that the data transmission 
and reception system which can prevent forgery and alteration of the data concerned is obtained 
is done so. 

[0108]In the data transmission and reception system which transmits and receives data between 
the 1st and 2nd information processors according to the invention according to claim 2, The 1st 
conversion method from which said 1st information processor changes further the data changed 
by the 1st key with the 2nd key, The transmitting means which transmits the data changed by 
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said 1 st conversion method, Since a preparation and said 2nd information processor were 
provided with the reception means which receives the data transmitted from said transmitting 
means, and the 2nd conversion method that changes the data received by said reception means 
with the 3rd key, The holder of the data after conversion cannot alter the data before the 
conversion which fabricated the data before conversion by the conversion origin in front of that, 
or was restored from the data after conversion, and cannot perform the same conversion as the 
conversion origin concerned, but by this. In transmission and reception of the data which goes 
via between different 3 persons, the effect that the data transmission and reception system 
which can prevent forgery and alteration of the data concerned is obtained is done so. 
[0109]The data which was changed by said 1st key in said invention according to claim 1 or 2 
according to the invention according to claim 3, Since it will become the original data before 
conversion with said 1st key if it is changed by said 2nd key and is further changed by said 3rd 
key, While the data before the conversion which the holder of the data after conversion 
fabricated the data before conversion by the conversion origin in front of that, or was restored 
from the data after conversion cannot be altered and the same conversion as the conversion 
origin concerned cannot be performed, While being able to restore the data before conversion by 
the conversion origin before two and preventing forgery and alteration of the data concerned by 
this in transmission and reception of the data which goes via between different 3 persons, Only 
the first sending person and the last addressee do so the effect that the data transmission and 
reception system which can peruse the contents of the data concerned easily is obtained. 
[01 10]According to the invention according to claim 4, in the data transmission and reception 
method transmitted and received, data between the 1st, 2nd, and 3rd information processors 
with said 1 st information processor. With the 1 st converting process that changes data with the 
1st key, the 1st transmission process that transmits the data changed by said 1st converting 
process from said 1st information processor to said 2nd information processor, and said 2nd 
information processor. The 2nd converting process that changes the data transmitted by said 
1st transmission process with the 2nd key, With the 2nd transmission process that transmits the 
data changed by said 2nd converting process from said 2nd information processor to said 3rd 
information processor, and said 3rd information processor. Since the 3rd converting process that 
changes the data transmitted by said 2nd transmission process with the 3rd key was included, 
The holder of the data after conversion cannot alter the data before the conversion which 
fabricated the data before conversion by the conversion origin in front of that, or was restored 
from the data after conversion, and cannot perform the same conversion as the conversion 
origin concerned, but by this. In transmission and reception of the data which goes via between 
different 3 persons, the effect that the data transmission and reception method which can 
prevent forgery and alteration of the data concerned is acquired is done so. 

[01 1 1]In the data transmission and reception method which transmits and receives data between 
the 1 st and 2nd information processors according to the invention according to claim 5, The 1 st 
converting process that changes further the data changed by the 1 st key with the 2nd key with 
said 1st information processor, The transmission process which transmits the data changed by 
said 1st converting process from said 1st information processor to said 2nd information 
processor, Since the 2nd converting process that changes the data transmitted by said 
transmission process with the 3rd key with said 2nd information processor was included, The 
holder of the data after conversion cannot alter the data before the conversion which fabricated 
the data before conversion by the conversion origin in front of that, or was restored from the 
data after conversion, and cannot perform the same conversion as the conversion origin 
concerned, but by this. In transmission and reception of the data which goes via between 
different 3 persons, the effect that the data transmission and reception method which can 
prevent forgery and alteration of the data concerned is acquired is done so. 
[0112]The data which was changed by said 1st key in said invention according to claim 4 or 5 
according to the invention according to claim 6, Since it will become the original data before 
conversion with said 1st key if it is changed by said 2nd key and is further changed by said 3rd 
key, While the data before the conversion which the holder of the data after conversion 
fabricated the data before conversion by the conversion origin in front of that, or was restored 
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from the data after conversion cannot be altered and the same conversion as the conversion 
origin concerned cannot be performed, While being able to restore the data before conversion by 
the conversion origin before two and preventing forgery and alteration of the data concerned by 
this in transmission and reception of the data which goes via between different 3 persons, Only 
the first sending person and the last addressee do so the effect that the data transmission and 
reception method which can peruse the contents of the data concerned easily is acquired. 
[01 13]By what the program which makes a computer perform the method indicated to any one of 
said claim 4 - the claims 6 was recorded for according to the invention according to claim 7. It 
becomes possible to read the program concerned by computer, and the effect that the recording 
medium which can enforce the method indicated by this any one of said claim 4 - the claims 6 
by computer is obtained is done so. 



[Translation done.] 
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* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2. **** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 
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[Brief Description of the Drawings] 

[Drawing 1] It is an explanatory view showing the system configuration of the data transmission 
and reception system by Embodiment 1. 

[Drawing 2] It is an explanatory view which constitutes the data transmission and reception 
system by Embodiment 1 and in which showing an example of the hardware constitutions of each 
computer. 

[Drawing 3] It is an explanatory view showing functionally the composition of the data 
transmission and reception system by Embodiment 1. 

[Drawing 4]It is a flow chart in the data transmission and reception system by Embodiment 1 
which shows the procedure of delivery processing of a key. 

[Drawing 5] It is a flow chart in the data transmission and reception system by Embodiment 1 
which shows the procedure of delivery processing of card information. 

[Drawing 6] It is a flow chart in the data transmission and reception system by Embodiment 1 
which shows the procedure of order/processing order of goods. 

[Drawing 7]It is an explanatory view in the data transmission and reception system by 
Embodiment 1 showing the data flow between each computer typically. 

[Drawing 8]It is an explanatory view showing the system configuration of the data transmission 
and reception system by Embodiment 2. 

[Drawing 9] It is an explanatory view showing functionally the composition of the data 
transmission and reception system by Embodiment 2. 

[Drawing 10] It is a flow chart in the data transmission and reception system by Embodiment 2 
which shows the procedure of certificate issuing and presentation processing. 
[Dr aw ing 1 1]It is an explanatory view in the data transmission and reception system by 
conventional technology showing the data flow between each computer typically. 
[Description of Notations] 

100 Internet 

101 The computer of card issuer A 

102 The card users B computer 

1 03 The computer of the member's store C 

200 A bus or a cable 

201 CPU 

202 ROM 

203 RAM 

204 HDD 

205 HD 

206 FDD 

207 FD 

208 Display 

209 Network I/F 

210 Communication line 

211 Keyboard 
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212 Mouse 

213 Scanner 

214 Printer 

215 CD-ROM 

216 CD-ROM drive 
301a Key generation part 
301b Key storage part 

301c Key transmission section 

301 d card information storage part 

301 e Card information encryption section 

301 f Card information transmission section 
302a Card information reception part 
302b Card information storage part 

302c Key receive section 

302 d Card signal transduction part 
302e Order sheet preparing part 

302 f Order sheet transmission section 
303a Key receive section 

303b Key storage part 

303c Key transmission section 

303 d Order sheet receive section 
303e Card information storage part 
303 f Card information decoding part 

800 Internet 

801 The testifiers A computer 

802 The testifier s B computer 

803 The customers C computer 
901a Key storage part 

901b Key selecting part 

901c Key transmission section 

901 d Proof matter storage parts store 

901 e Certificate preparing part 

901 f Certificate encryption section 

901 g Certificate transmission section 
902a Certificate receive section 
902b Key receive section 

902c Certificate converter 

902 d Certificate transmission section 
903a Key receive section 

903b Key storage part 

903c Key transmission section 

903 d Certificate receive section 
903e Certificate decoding part 



[Translation done.] 



